Route Origin Authorization

$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
File:                     326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa (raw, json)
Hash identifier:          uuTGEhAeGyU26jUVyq5CvdCVGF5bYkwRsfZUU8hPeCs=
Subject key identifier:   51:92:40:C7:A2:06:6C:F3:B7:5C:DD:65:C0:97:E3:C0:DB:55:AF:2C
Certificate issuer:       /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial:       449172BA273D4B30FB199D6C7CE2F3BC42CEFB26
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa
Signing time:             Fri 05 Apr 2024 22:48:16 +0000
ROA not before:           Fri 05 Apr 2024 22:43:16 +0000
ROA not after:            Fri 04 Apr 2025 22:48:16 +0000
asID:                     199766
IP address blocks:        2a05:dfc1:8903::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl
                          rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 07:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:72:ba:27:3d:4b:30:fb:19:9d:6c:7c:e2:f3:bc:42:ce:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
        Validity
            Not Before: Apr  5 22:43:16 2024 GMT
            Not After : Apr  4 22:48:16 2025 GMT
        Subject: CN=519240C7A2066CF3B75CDD65C097E3C0DB55AF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:ee:a0:2a:4b:0b:cd:c8:0b:3f:ff:48:2a:
                    b7:3e:da:7b:d8:df:5c:06:e0:f5:bd:fe:7a:8a:f0:
                    32:0b:11:f4:5f:d2:b3:7e:d8:ff:a3:e0:80:01:f2:
                    70:3c:d0:f2:0a:1a:c7:dc:a0:3a:36:ce:4f:c2:72:
                    d6:42:02:26:f8:c6:20:63:b2:87:35:32:e6:86:ed:
                    e8:54:af:de:63:72:4d:ec:68:93:82:8f:47:ed:1e:
                    33:16:e4:17:e1:1c:f8:ed:9a:aa:1d:34:0c:6c:a4:
                    74:2f:f7:aa:95:54:b9:80:5b:cd:04:fb:01:d1:b3:
                    7c:17:4a:a8:c4:3a:48:b6:08:66:3f:11:6b:ca:25:
                    8a:80:94:35:9d:3b:72:13:65:c0:5a:5e:44:b8:ef:
                    6d:15:3d:e4:cd:3a:8d:b6:eb:f8:42:1e:1c:43:1f:
                    30:f7:c7:b2:d3:65:88:d3:fd:c8:66:08:df:dc:b2:
                    77:5e:eb:6e:de:d2:3a:20:25:e2:5b:67:94:6b:8e:
                    8b:6a:6d:b7:b6:80:df:fa:ad:58:5c:42:c8:48:95:
                    45:6c:25:b6:a4:31:91:aa:c4:3f:f7:12:55:c6:13:
                    dc:8d:ff:cb:8f:0f:bf:f7:5c:16:23:84:66:bb:81:
                    b3:ec:57:f5:e8:03:d8:51:ae:aa:5f:06:5a:5c:26:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:40:C7:A2:06:6C:F3:B7:5C:DD:65:C0:97:E3:C0:DB:55:AF:2C
            X509v3 Authority Key Identifier:
                keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930333a3a2f34382d3438203d3e20313939373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8903::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:93:22:35:53:e1:21:33:30:32:00:13:8b:26:6c:59:d0:
         ad:ef:a8:68:27:a0:47:57:58:7a:c6:dd:32:7e:ab:2c:ea:5d:
         60:8b:08:61:ff:18:0b:bc:6c:82:86:cb:da:53:2e:c6:12:aa:
         7b:6c:70:cb:cd:db:c0:67:c1:b1:23:48:0c:65:b8:5b:b9:79:
         4d:11:d3:36:31:f5:bf:82:76:f8:0f:5c:1a:f4:ed:c5:2f:ae:
         28:06:87:f9:02:76:66:cc:7c:bd:96:8c:b5:99:bd:08:c2:14:
         35:ef:44:70:cd:d6:f7:e0:77:b5:1d:20:b2:f7:82:90:8c:bf:
         6a:f6:45:d8:81:b7:19:c2:41:43:3f:ff:74:03:6d:ea:70:9f:
         31:40:1d:9e:7b:dc:e8:8e:53:71:34:a3:f0:6a:41:c4:ad:0d:
         b4:a9:ba:00:46:79:88:18:64:6a:ff:df:2b:fd:9b:7b:52:c6:
         d8:81:e7:e8:c8:2d:04:a7:95:72:cd:45:93:b6:0c:c9:b1:b5:
         00:b0:3d:13:e7:92:06:37:52:23:7f:e2:c1:d5:02:e1:fc:a6:
         7e:b6:27:d8:94:63:c9:f9:df:10:70:38:71:c8:9c:3a:31:a0:
         b0:a9:12:83:fe:fa:af:a1:2c:0f:a2:fd:13:a7:f5:27:f1:22:
         fb:bf:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:26:06 2024 by rpki-client on console.sobornost.net